We are getting a redirect (HTTP 302 found) to a protected resource with "/" at the end of the requested path, to be more specific:

Supposing my reverse proxy is https://example.com/ and the web server have a path called DpoService.svc
When we consume it through example.com somewhere we get a redirect to https://example.com/DpoService.svc/ (whit "/" at the end) because of that then the web server responds HTTP 400 Bad Request because of that "/". If we consume the path directly to the web server by IP address or host name there is no redirect.

We have installed a Novell Access Gateway Appliance v4.1. Any have a clue what is happening? Who do the redirect?

On a SP Initiated SAMLv2 Federation, is it possible to establish an authorization rule that deny access for users that don't have an specific role?

Reviewing the documentation I see that something like this can be done with Service Provider Brokering, but in that case it seems to indicate that it can only be used in the event that the federation is IDP Initiated.

Regards
Jose Luis
]]>Access Managerjlrodriguezhttps://forums.novell.com/showthread.php/512400-SP-Initiated-SAML-and-Authorization-ruleCannot send email from templatehttps://forums.novell.com/showthread.php/512398-Cannot-send-email-from-template?goto=newpost
Fri, 24 May 2019 15:46:51 GMTI am chasing down an issue with do-send-email-from-template. This is something that was working, post upgrade, but now has quit.
The error I get...I am chasing down an issue with do-send-email-from-template. This is something that was working, post upgrade, but now has quit.

I found a related (somewhat) TID (forgot the number) that said to add the smtp server's cert to the cacert keystore. Did that. The Cert signers were already in the keystore. No joy.

I started checking access using nc, dig, host, and nslookup, just to verify settings and found an interesting problem. It seems this server has a mismatch in where it is getting it's library files.
This is SLES 12 SP4. eDir 9.1.3, IDM is 4.7.2, AD Driver is 4.1.1.0.

This environment has 3 virtually identical servers. I tried doing the send-email on another server, and it works fine. Digging deeper, I used the linux ldd command to trace some libraries, and found this.

Server 1 is the working server, Server 2 is the one that has the email problem. Server 1 did NOT get the smtp server cert added to cacerts, yet works fine.

There are missing libraries, and for Server2, it seems to be getting some libraries from /opt/novell/lib64, and others from /lib64.

/lib64 has newer (by date/time stamp) files than /opt/novell/lib64

There were similar results using ldd on dig, host, and nslookup. It appears that something may have updated/patched Server2 via SUSE, and changed something, but what?

An echo $LD_LIBRARY_PATH shows nothing on both, and their $PATH statements are identical. Both servers have iManager 3.0.3 installed, but Server2 has started throwing this: Unable to create AdminNamespace. java.lang.NoClassDefFoundError: novell/jclient/JCException where it worked fine previously.

This is our testing environment, and we need this answered before we move Production to IDM 4.7.2. Prod runs on SLES 11 SP3, and eDir 8.8.8.8, so this is a multi-step upgrade. Not very easy to roll back.

Thoughts or ideas?
]]>IM: Engine-Driverstse7147https://forums.novell.com/showthread.php/512398-Cannot-send-email-from-templateWebinar - Cartographie de vos données: découverte de vos donhttps://forums.novell.com/showthread.php/512397-Webinar-Cartographie-de-vos-donn%C3%A9es-d%C3%A9couverte-de-vos-don?goto=newpost
Fri, 24 May 2019 15:00:07 GMTView the video... (https://www.youtube.com/watch?v=_29ATPgF2aM)View the video...
]]>Micro Focus VideosInTheNewshttps://forums.novell.com/showthread.php/512397-Webinar-Cartographie-de-vos-donn%C3%A9es-d%C3%A9couverte-de-vos-donDNS-DHCP objects and attributes in JChttps://forums.novell.com/showthread.php/512396-DNS-DHCP-objects-and-attributes-in-JC?goto=newpost
Fri, 24 May 2019 14:55:49 GMTHello
I have some trouble with the DNS Servers and the update with from the DHCP servers.
What tabs do you have for your DNS server?
I have...Hello

I have some trouble with the DNS Servers and the update with from the DHCP servers.

What tabs do you have for your DNS server?
I have Zones, Forwarding List, No-Forward List, Options, Key List
Have you more?

My second issue:
I have generated a key in "All Zones", but I do not see it in the Key List.
what coud be wrong?

Thanks a lot
Sebastian
]]>DNS-DHCPSebastianEichingerhttps://forums.novell.com/showthread.php/512396-DNS-DHCP-objects-and-attributes-in-JCSubmit a PRD from a JSPhttps://forums.novell.com/showthread.php/512394-Submit-a-PRD-from-a-JSP?goto=newpost
Fri, 24 May 2019 10:19:21 GMTCan we submit a PRD from a JSP file using REST API. Any leads would be really helpful
Regards,
PrabhatCan we submit a PRD from a JSP file using REST API. Any leads would be really helpful

Has anybody had issues with database maintenance in 3.5 after upgrading from 3.0 SP1?

I get foreign key constraint errors when running a cleanup.

-alekz
]]>Identity Governancealekzhttps://forums.novell.com/showthread.php/512393-DB-cleanup-fails-after-upgradeGW18 Migrating from local GW passwords to Active Directoryhttps://forums.novell.com/showthread.php/512392-Migrating-from-local-GW-passwords-to-Active-Directory?goto=newpost
Thu, 23 May 2019 17:00:29 GMTWe have a small 200 user GroupWise post office that currently utilizes the internal GroupWise database to store accounts and credentials. We want to...We have a small 200 user GroupWise post office that currently utilizes the internal GroupWise database to store accounts and credentials. We want to use our Active Directory LDAP to centralize authentication and get away from the GroupWise database. I have read about migrating from eDirectory to Active Directory and enabling LDAP synchronization, but was wondering how it works with an existing post office with existing users. Is there a process where it just synchronizes and leaves the user accounts as they are except uses the AD authentication? What about email accounts that are in GW but not in AD?

My customer want to use IGA for requesting technical roles.
But as I see it all roles just appear in a flat structure under the "Technical Role" tab.

Is there a way to sort and search in there? I tried to create catagories but that did not appear in here.

Any syggestions are welcome.
]]>Identity Governancejoakim_gansehttps://forums.novell.com/showthread.php/512387-How-to-sort-roles-visually-for-easy-requestsSSPR email Templateshttps://forums.novell.com/showthread.php/512386-SSPR-email-Templates?goto=newpost
Thu, 23 May 2019 10:07:05 GMT element.]]>Does SSPR have the capability to set Reply TO email address to some specific address just like drivers have the <reply-to> element.
]]>Self Service Password Resetpappa_recd1https://forums.novell.com/showthread.php/512386-SSPR-email-TemplatesProvisioning Request Forms after 4.7.1 patchhttps://forums.novell.com/showthread.php/512385-Provisioning-Request-Forms-after-4-7-1-patch?goto=newpost
Thu, 23 May 2019 09:53:18 GMTHi,

I haven't been working with Provisioning Request Forms (and NetiIQ IDM) since over a year from now (last touch with this was on 4.5 version).
Currently I'm reading in 4.7.1 patch notes that: "The User Application interface and the following features are discontinued".
On netIQ Youtube video I can see "discontinued" on every IDMProv screen.

Could somebody explain to me what it's really means? Can I still access IDMProv or do I have to use Dash only for making requests?

I have alot of custom Provisioning Request Forms that provides functionality far beyond entitlements/roles requesting. Will I still be able to use them after patching from 4.5 to 4.7.x?

Thanks in advance for any responses.
]]>IM: Userapp-Workflowrfiliphttps://forums.novell.com/showthread.php/512385-Provisioning-Request-Forms-after-4-7-1-patchReflection error in transimissionhttps://forums.novell.com/showthread.php/512384-Reflection-error-in-transimission?goto=newpost
Thu, 23 May 2019 08:45:47 GMTHi,
Recently keep facing some disconnection in reflection for SecureIT for Windows.
I tried to look solutions and workaround for the error but...Hi,

Recently keep facing some disconnection in reflection for SecureIT for Windows.
I tried to look solutions and workaround for the error but end up cannot find anything related to that.

I try to search on this error but not much things I can get.
And this error is happening intermittent (maybe twice a month).

Anyone having this issue before and have the solution?
Can kindly advise for this? or any help?

Thanks
]]>Reflectiontspdpsupporthttps://forums.novell.com/showthread.php/512384-Reflection-error-in-transimissionWebinar - Sécurisez vos applications avec Fortify : analyseshttps://forums.novell.com/showthread.php/512383-Webinar-S%C3%A9curisez-vos-applications-avec-Fortify-analyses?goto=newpost
Thu, 23 May 2019 01:14:49 GMTView the video... (https://www.youtube.com/watch?v=oHQ0mnvse50)View the video...
]]>Micro Focus VideosInTheNewshttps://forums.novell.com/showthread.php/512383-Webinar-S%C3%A9curisez-vos-applications-avec-Fortify-analysesRemoving Teamworkshttps://forums.novell.com/showthread.php/512381-Removing-Teamworks?goto=newpost
Wed, 22 May 2019 21:23:03 GMTI have searched through all the documentation and there's really nothing to assist me with the steps to completely remove Teamworks. I have it installed on a SuSE Linux server, and we are instead going to roll out Vibe on that server. No one is currently using (or has even used) Teamworks since we installed it. How do I cleanly remove it from the server?